Bypassing kernel patch protection at runtime
☆22Aug 16, 2026Updated last week
Alternatives and similar repositories for PatchGuardResearch
Users that are interested in PatchGuardResearch are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An advanced DKOM for drivers with "DRIVER_OBJECT"☆23Feb 19, 2023Updated 3 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆22Nov 22, 2021Updated 4 years ago
- ☆42Apr 18, 2023Updated 3 years ago
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A simple C++ driver base with KD data block☆11Jun 25, 2022Updated 4 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆86Dec 21, 2022Updated 3 years ago
- A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.☆22May 25, 2021Updated 5 years ago
- Virtual and physical memory hacking library using gigabyte vulnerable driver☆70Mar 16, 2026Updated 5 months ago
- Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.☆19Jul 31, 2019Updated 7 years ago
- x64 Windows implementation of virtual-address to physical-address translation☆53Jun 3, 2021Updated 5 years ago
- Hijack NotifyRoutine for a kernelmode thread☆38Jun 4, 2022Updated 4 years ago
- Dangling COM Keys Finder☆17Nov 16, 2021Updated 4 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆159Mar 16, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Hooking Heavens Gate in a weekend☆13Jan 1, 2022Updated 4 years ago
- Browse Page Tables on Windows (Page Table Viewer)☆241Apr 2, 2022Updated 4 years ago
- Sample for Creating a new kernel object type and supporting API☆28Sep 7, 2024Updated last year
- ☆24Jul 24, 2023Updated 3 years ago
- undetected cheat engine 7.2☆12Dec 28, 2020Updated 5 years ago
- Hooking the Windows usermode exception handler☆23Aug 13, 2024Updated 2 years ago
- Bypassing PatchGuard on modern x64 systems☆268Apr 9, 2023Updated 3 years ago
- Bypass Windows defender syscall☆17Jul 17, 2021Updated 5 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆104May 10, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Modmap updated to work on Windows 11☆28Jul 30, 2021Updated 5 years ago
- Windows Kernel Programming Experiments☆84Sep 18, 2022Updated 3 years ago
- ☆16Apr 18, 2023Updated 3 years ago
- What makes it page☆17Aug 24, 2022Updated 4 years ago
- detect hypervisor with Nmi Callback☆41Sep 25, 2022Updated 3 years ago
- Runtime smm module loader☆39Jan 12, 2023Updated 3 years ago
- hook KeyboardClassServiceCallback to prevent messing up sistema☆26Nov 14, 2023Updated 2 years ago
- ☆12Sep 21, 2021Updated 4 years ago
- A wrapper around Windows, calls explicitly the lowest possible calls☆14Jan 19, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆243Nov 6, 2019Updated 6 years ago
- Illustrates the concept of return address spoofing, and how it is used.☆14May 13, 2020Updated 6 years ago
- Decoder for VMProtect hwids☆19Aug 1, 2022Updated 4 years ago
- ☆75Dec 17, 2020Updated 5 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆269Aug 31, 2022Updated 3 years ago
- i stole this from some guys private repo on github☆58Jul 11, 2021Updated 5 years ago
- PAGE_GUARD based hooking library☆53Jul 25, 2022Updated 4 years ago